Senior Identity Management Engineer

About this role

We are looking for an experienced IAM engineer to lead the implementation of our Identity modernisation roadmap. The role balances high‑level architectural vision with hands‑on technical execution, managing the end‑to‑end lifecycle of the Ping Identity suite and Zero‑Trust infrastructure.

• Lead installation, fine‑tuning, and maintenance of the Ping Identity suite (Ping Federate, Ping Directory, Ping Access).
• Develop connectors and workflows between authentication layers and IGA, PAM, PIM platforms.
• Build and manage identity infrastructure using Terraform or Ansible, ensuring automation and version control.
• Engineer scalable customer identity journeys (SCIM, SAML, OIDC, OAuth2) for CIAM, maintaining seamless user experience.
• Define technical standards for the identity team, producing high‑quality code, documentation, and architectural patterns.
• Serve as the primary escalation point for complex technical failures, performing deep‑dive analysis of protocol exchanges.
• Mentor junior and mid‑level engineers, providing technical guidance, peer reviews, and collaborative problem solving.
• Engage with stakeholders across teams, influencing decisions and communicating solutions.

• Solid hands‑on engineering experience in IAM.
• Extensive experience deploying and managing Ping Federate (SAML/OAuth/OIDC), Ping Directory, Ping Access.
• Proven track record of migrating legacy identity systems to modern, claims‑based architectures.
• Experience configuring and integrating IGA tools (SailPoint, Saviynt) and PAM/PIM solutions.
• Expert ability in debugging and configuring SAML, OIDC, OAuth2, SCIM workflows.
• Strong understanding of RBAC, ABAC, Zero‑Trust, LDAP, Active Directory, Azure AD/Entra .
• Experience with PAM solutions (vaulting, session recording, password rotation) and PIM principles.
• Proficiency in scripting (Python, Power Shell, Bash) and Infrastructure as Code (Terraform, Ansible).
• Ability to analyze HTTP headers, trace logs, and identity telemetry to resolve complex issues.

• Ping Identity Certified Professional (Ping Federate/Ping Access), CISSP, CISM, or vendor‑specific PAM certification.
• Experience with cloud identity providers (Azure AD/Entra ) and securing workloads in AWS, Azure, or GCP.
• Experience deploying IAM solutions in Docker/Kubernetes environments.
• Excellent written and oral communication skills in English.

• Builder mindset: hands‑on creation and delivering technical projects to completion.
• Strategic execution: translate broader business objectives into secure technical solutions.
• Technical rigor: disciplined engineering approach prioritising correctness over temporary work‑arounds.

• Competitive salary and vacation allowance.
• Work‑from‑home allowance and Calm app.
• Life assurance and private medical insurance.
• Cycle to Work scheme, Employee Assistance Program, eye tests, and glasses contribution.
• Enhanced Health Plan, Pension Scheme, GAYE, and Employee Referral Program.
• Paid volunteering days, marriage leave, bereavement leave, and vacation purchase plan.

Cloud Pay is committed to being an equal opportunities employer.